Staff Security Engineer

Staff Security Engineer Department: Engineering Team: Security Engineer Location: San Francisco, United States Type: Full-Time **About the Role** As a Staff Security Engineer, you will be the lead architect for Uber’s next-generation cloud security infrastructure. Operating at the intersection of Cloud Architecture and Applied AI, you will move beyond static controls to build a dynamic, autonomous security ecosystem across our multi-cloud estate, especially GCP and OCI. Your mission is to transform Cloud Security Posture Management (CSPM) from a reactive alerting system into a proactive, self-healing machine. You will spearhead the use of GenAI and AI Agent Orchestration to automate complex security reasoning—building intelligent agents that can independently analyze, prioritize, and remediate exploitable risks at scale. You will also provide security design solutions to support Uber's new business initiatives to ensure secure-by-design and compliance. **What the Candidate Will Need / Bonus Points** \-\-\-\- What the Candidate Will Do ---- - **Strategic Architecture:** Define the long-term roadmap for **Identity-centric security** and automated posture management for tens of thousands cloud users. - **AI Orchestration:** Design and deploy **Multi-Agent systems** and RAG pipelines to automate the end-to-end security remediation lifecycle. - **Scaling Control:** Implement "LLM-as-a-Judge" frameworks to ensure the safety and precision of autonomous security actions. - **Harden the Perimeter:** Eliminate security hotspots and enforce **secure-by-default** baselines across all cloud platforms. - **Technical Leadership:** Serve as a force-multiplier, mentoring engineers and bridging the gap between security research and production engineering. \-\-\-\- Basic Qualifications ---- - **Multi-Cloud Expertise:** 5+ years of experience in Cloud Security, with direct, hands-on experience architecting and securing Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI). - **Security Posture Management:** Expert-level understanding of CSPM frameworks, Deep knowledge of IAM, Network, vulne